EXOS Concepts Guide for Release 15.3

1670 Pages·2013·39 MB·English

EXOS Concepts Guide for
Release 15.3
Copyright © 2001—2013 Extreme Networks
AccessAdapt, Alpine, Altitude, BlackDiamond, Direct Attach, EPICenter, ExtremeWorks Essentials,
Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks,
Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare,
ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ExtremeXOS ScreenPlay, ReachNXT,
Ridgeline, Sentriant, ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture,
Unified Access RF Manager, UniStack, XNV, the Extreme Networks logo, the Alpine logo, the
BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, and the Powered by
ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or its
subsidiaries in the United States and/or other countries.
sFlow is the property of InMon Corporation.
iBooks is property of Apple, Inc.
Specifications are subject to change without notice.
All other registered trademarks, trademarks, and service marks are property of their respective
owners.
Notice
Software Licensing
Copyright (c) 1995-1998 by Cisco Systems, Inc.
Permission to use, copy, modify, and distribute this software for any purpose and without fee is hereby
granted, provided that this copyright and permission notice appear on all copies of the software and
supporting documentation, the name of Cisco Systems, Inc. not be used in advertising or publicity
pertaining to distribution of the program without specific prior notice be given in supporting
documentation that modification, permission, and copying and distribution is by permission of Cisco
Systems, Inc.
Cisco Systems, Inc. makes no representations about the suitability of this software for any
purpose. THIS SOFTWARE IS PROVIDED "AS IS'" AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
MD5C.C - RSA Data Security, Inc., MD5 Message-Digest Algorithm
Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All rights reserved.
License to copy and use this software is granted provided that it is identified as the "RSA Data Security,
Inc. MD5 Message-Digest Algorithm" in all material mentioning or referencing this software or this
function.
License is also granted to make and use derivative works provided that such works are identified as
"derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm" in all material mentioning or
referencing the derived work.
RSA Data Security, Inc. makes no representations concerning either the merchantability of this
software or the suitability of this software for any particular purpose. It is provided "as is" without
express or implied warranty of any kind.
These notices must be retained in any copies of any part of this documentation and/or software.
$Id: md5c.c,v 1.2.4880.1 2005/06/24 01:47:07 lindak Exp $ This code is the same as the code published
by RSA Inc. It has been edited for clarity and style only.
Table of Contents
Preface 13
Introduction 13
Conventions 13
Related Publications 15
Chapter 1: Getting Started 16
Overview 16
Software Required 17
Log In to the Switch 19
Understanding the Command Syntax 20
Port Numbering 25
Line-Editing Keys 27
View Command History 27
Common Commands 28
Use Safe Defaults Mode 30
Configuring Management Access 31
Managing Passwords 37
Access to Both MSM/MM Console Ports—Modular Switches Only 39
Access to an Active Node in a SummitStack 39
Domain Name Service Client Services 39
Checking Basic Connectivity 40
Display Switch Information 42
Chapter 2: Managing the Switch 45
Overview 45
Understanding the ExtremeXOS Shell 46
Using the Console Interface 46
Use the 10/100 Ethernet Management Port 47
Using Ridgeline to Manage the Network 48
Authenticating Users 48
Using Telnet 49
Using Secure Shell 2 57
Using the Trivial File Transfer Protocol 60
Understanding System Redundancy 61
Understanding Hitless Failover Support 66
Understanding Power Supply Management 73
Use Motion Detectors 79
Using the Network Time Protocol 79
Using the Simple Network Management Protocol 85
Using the Simple Network Time Protocol 99
Using Auto Provision of Edge Switches 104
Access Profile Logging for HTTP/HTTPS 109
Chapter 3: Managing the ExtremeXOS Software 111
Overview 111
Using the ExtremeXOS File System 112
Managing the Configuration File 115
Managing ExtremeXOS Processes 116
Understanding Memory Protection 119

EXOS Concepts Guide for Release 15.3 4
Table of Contents
Chapter 4: Configuring Stacked Switches 123
Overview 123
Logging into a Stack 137
Stack Configuration Guidelines 139
Configuring a New Stack 143
Convert a Standalone Node Deployment to a Stack 150
Stack Configuration Tasks 152
Managing an Operating Stack 173
Troubleshooting a Stack 200
FAQs on the SummitStack Feature 208
Chapter 5: Configuring Slots and Ports on a Switch 210
Overview 210
Configure Slots on Modular Switches 210
Configuring Ports on a Switch 212
Terms 243
Using the Precision Time Protocol 262
Jumbo Frames 276
Link Aggregation on the Switch 279
MLAG 295
Mirroring 306
Remote Mirroring 311
Extreme Discovery Protocol 317
Software-Controlled Redundant Port and Smart Redundancy 318
Configuring Automatic Failover for Combination Ports 320
Display Port Information 321
EXOS Port Description String 323
Port Isolation 324
Chapter 6: Universal Port 325
Overview 325
Configuring Universal Port Profiles and Triggers 343
Managing Profiles and Triggers 346
Sample Universal Port Configurations 349
Chapter 7: Using CLI Scripting 375
Overview 375
Setting Up Scripts 375
Displaying CLI Scripting Information 384
CLI Scripting Examples 385
Chapter 8: LLDP 387
Overview 387
Configuring and Managing LLDP 393
Displaying LLDP Information 403
Chapter 9: OAM 404
CFM 404
Y.1731—Compliant Performance Monitoring 416
EFM OAM—Unidirectional Link Fault Management 424
Bidirectional Forwarding Detection (BFD) 427

EXOS Concepts Guide for Release 15.3 5
Table of Contents
Chapter 10: PoE 430
Overview 430
Extreme Networks PoE Devices 430
Summary of PoE Features 432
Power Checking for PoE Module 432
Power Delivery 433
Configure PoE 433
Displaying PoE Settings and Statistics 440
Chapter 11: Status Monitoring and Statistics 446
Overview 446
View Port Statistics 446
View Port Errors 447
Using the Port Monitoring Display Keys 449
Viewing VLAN Statistics 449
Performing Switch Diagnostics 450
Using the System Health Checker 455
Setting the System Recovery Level 459
Using ELSM 468
View Fan Information 479
View the System Temperature 480
Using the Event Management System/Logging 482
Using theXML Notification Client 498
Using sFlow 501
UsingRMON 506
Monitoring CPU Utilization 511
Chapter 12: VLANs 514
Overview 514
Configuring VLANs on the Switch 523
Display VLAN Information 527
Private VLANs 528
VLAN Translation 547
Chapter 13: VMAN (PBN) 558
Overview 558
Configuration 564
Displaying Information 568
Configuration Examples 569
Chapter 14: FDB 572
Overview 572
Managing the FDB 575
Displaying FDB Entries and Statistics 578
MAC-Based Security 579
Managing MAC Address Tracking 583
Chapter 15: Data Center Solutions 585
Overview 585
Managing the DCBX Feature 595
Managing the XNV Feature, VM Tracking 596
Manage Direct Attach to Support VEPA 617

EXOS Concepts Guide for Release 15.3 6
Table of Contents
Managing the FIP Snooping Feature 618
Chapter 16: AVB 620
Overview 620
AVB Feature Pack License 621
Configuring and Managing AVB 621
Displaying AVB Information 623
Chapter 17: Virtual Routers 628
Overview 628
Managing Virtual Routers 632
Virtual Router Configuration Example 638
Chapter 18: Policy Manager 639
Overview 639
Creating and Editing Policies 639
Applying Policies 642
Chapter 19: ACLs 644
Overview 644
ACL Rule Syntax 645
Layer-2 Protocol Tunneling ACLs 660
ACL Byte Counters 661
Dynamic ACLs 662
ACL Evaluation Precedence 675
Apply ACL Policy Files 677
ACL Mechanisms 681
Policy-Based Routing 701
ACL Troubleshooting 708
Chapter 20: Routing Policies 711
Overview 711
Routing Policy File Syntax 711
Apply Routing Policies 717
Policy Examples 718
Chapter 21: QoS 722
Overview 722
Configuring QoS 737
Displaying QoS Configuration and Performance 751
Chapter 22: Network Login 753
Overview 753
Configuring Network Login 762
Authenticating Users 764
Local Database Authentication 765
802.1x Authentication 769
Web-Based Authentication 779
MAC-Based Authentication 788
Additional Network Login Configuration Details 792
Chapter 23: Identity Management 801
Overview 801
Identity Management Feature Limitations 817

EXOS Concepts Guide for Release 15.3 7
Table of Contents
Configuring Identity Management 818
Managing the Identity Management Feature 825
Displaying Identity Management Information 826
Chapter 24: Security 827
Overview 827
Safe Defaults Mode 829
MAC Security 829
DHCP Server 838
IP Security 839
Denial of Service Protection 857
Authenticating Management Sessions Through the Local Database 860
Authenticating Management Sessions Through a TACACS+ Server 861
Authenticating Management Sessions Through a RADIUS Server 866
Authenticating Network Login Users Through a RADIUS Server 868
Configuring the RADIUS Client 870
RADIUS Server Configuration Guidelines 873
Configure a Windows XP Supplicant for 802.1x Authentication 897
Hyptertext Transfer Protocol 897
Secure Shell 2 897
Secure Socket Layer 906
Chapter 25: CLEAR-Flow 910
Overview 910
Configure CLEAR-Flow 910
Adding CLEAR-Flow Rules to ACLs 911
CLEAR-Flow Rule Examples 925
Chapter 26: EAPS 929
Overview 929
Configuring EAPS 941
Displaying EAPS Information 950
Configuration Examples 952
Chapter 27: ERPS 990
Overview 990
Supported ERPS Features 991
G.8032 Version 2 992
Configuring ERPS 998
Sample Configuration 1000
Debugging ERPS 1002
ERPS Feature Limitations 1002
Chapter 28: STP 1003
Overview 1003
Span Tree Domains 1013
STP Configurations 1025
Per VLAN Spanning Tree 1031
Rapid Spanning Tree Protocol 1032
Multiple Spanning Tree Protocol 1043
STP and Network Login 1055
STP Rules and Restrictions 1056

EXOS Concepts Guide for Release 15.3 8
Table of Contents
Configure STP on the Switch 1057
Display STP Settings 1058
STP Configuration Examples 1060
Chapter 29: ESRP 1066
Overview 1066
Configuring ESRP 1077
Operation with Other ExtremeXOS Features 1081
Advanced ESRP Features 1085
Display ESRP Information 1091
ESRP Configuration Examples 1092
Chapter 30: VRRP 1097
Overview 1097
Configuring VRRP 1106
Managing VRRP 1109
Displaying VRRP Information 1110
VRRP Configuration Examples 1110
Chapter 31: MPLS 1113
Overview 1113
Configuring MPLS 1159
Displaying MPLS Configuration Information 1171
MPLS Configuration Example 1178
Configuring MPLS Layer-2 VPNs (VPLS and VPWS) 1181
VPLS VPN Configuration Examples 1185
Configuring H-VPLS 1189
Configure Protected VPLS 1190
Configuring RSVP-TE 1190
RSVP-TE Configuration Example 1196
Troubleshooting MPLS 1199
Chapter 32: IPv4 Unicast Routing 1201
Overview 1201
Configuring Unicast Routing 1221
Displaying the Routing Configuration and Statistics 1225
Routing Configuration Example 1227
Duplicate Address Detection 1228
Proxy ARP 1231
IPv4 Multinetting 1232
DHCP/BOOTP Relay 1238
Broadcast UDP Packet Forwarding 1242
IP Broadcast Handling 1245
VLAN Aggregation 1246
Chapter 33: IPv6 Unicast Routing 1250
Overview 1250
Neighbor Discovery Protocol 1253
Managing Duplicate Address Detection 1258
Managing IPv6 Unicast Routing 1265
IPv6 ECMP and 32-Way ECMP 1269
Configure Route Compression 1269

EXOS Concepts Guide for Release 15.3 9
Table of Contents
Hardware Forwarding Behavior 1270
Routing Configuration Example 1272
Tunnel Configuration Examples 1273
Chapter 34: RIP 1279
Overview 1279
Overview of RIP 1280
Route Redistribution 1282
RIP Configuration Example 1283
Chapter 35: RIPng 1286
Overview 1286
Overview of RIPng 1287
Route Redistribution 1288
RIPng Configuration Example 1289
Chapter 36: OSPF 1291
Overview 1291
Route Redistribution 1298
Configuring OSPF 1300
OSPF Configuration Example 1301
Display OSPF Settings 1304
Chapter 37: OSPFv3 1305
Overview 1305
Route Redistribution 1309
Normal Area 1311
Chapter 38: IS-IS 1312
Overview 1312
Route Redistribution 1318
Configuring IS-IS 1319
Displaying IS-IS Information 1324
Managing IS-IS 1325
Configuration Example 1331
Chapter 39: BGP 1332
Overview 1332
Configuring BGP 1350
Managing BGP 1363
Displaying BGP Information 1364
Configuration Examples 1366
Chapter 40: Layer 3 Virtual Private Network 1403
Layer 3 VPN 1403
Overview of BGP/MPLS Network 1404
VPN NLRI 1407
Overlapping Customer Address Spaces 1407
Multi-protocol BGP Extension 1407
Multiple Forwarding Tables 1408
Quality of service in BGP/MPLS VPN 1408
Virtual Routing and Forwarding Instances 1408
Control Plane 1409

EXOS Concepts Guide for Release 15.3 10